Extracted

• • Target

    25a499f71d8652bf3f9800057412e31e

  • Size

    2.7MB

  • MD5

    25a499f71d8652bf3f9800057412e31e

  • SHA1

    b74b638471e2dafec4d98d3e790920be500b3318

  • SHA256

    e91997ede0af6498cdec211340fc59fcb814a9bbaf47115149d1e17126b8088a

  • SHA512

    4911f395a3d2f296344dcd5869c65b3ad9e10bb749a9e0cb6cd4ff96ee643555a8c0a99258cc4123ba81dc1ec969d2caf3b2152eb123a34bbc8bfbeaa5ee0b0a

  • SSDEEP

    24576:c4abEjzQIEjzQIEjzQIEjzQIEjzQIEjzQIEjzQIEjzQIEjzQ9EjzQIEjzQ911EjR:YccccccccxcZ/cccc1goPBy

  Score

  10^/10

  asyncratdefaultrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Async RAT payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2